Rights management system for electric vehicle Bluetooth terminals

Abstract

The present invention relates to the technical field of electric vehicle rights management, and in particular to a rights management system for electric vehicle Bluetooth terminals. In this system, for a single communication initiated by a control terminal, a key memory matches the control terminal; in response to the key in the key memory completing the match, the key memory passes authentication by the control terminal; in response to the key memory passing authentication, a Bluetooth actuator initiates authentication of the control terminal based on the device key; in response to the key in the Bluetooth actuator completing the match, the Bluetooth actuator broadcasts that the Bluetooth actuator has passed authentication; and the control terminal responds to the Bluetooth actuator passing authentication and pairs with the Bluetooth actuator. The present invention utilizes a central platform and a plurality of matrix platforms to distribute keys of different categories, and combines the keys with hardware to utilize mutual authentication between the device and the control terminal for Bluetooth matching, effectively improving the security of both the device and the Bluetooth device.

Description

Technical Field

[0001] The present invention relates to the technical field of electric vehicle authority management, and in particular to an authority management system for an electric vehicle Bluetooth terminal. Background Art

[0002] Bluetooth is a short-range communication technology that can achieve wireless connection between devices and provide electric vehicles with remote control and data transmission functions.

[0003] Users need to pair the scooter with their phone via Bluetooth. Download and install the corresponding app on your phone and follow the app's instructions to pair the scooter. Generally, users need to hold their phone close to the pairing button on the scooter or scan a QR code to complete the pairing.

[0004] In the application scenarios of electric two-wheeled vehicles, it is crucial to build an efficient and secure equipment management system.

[0005] Chinese Patent Authorization Announcement No.: CN108416207B discloses a method for identifying Bluetooth usage rights, which is characterized in that it includes the following steps: receiving a Bluetooth service usage request from an application, wherein the request includes the type of Bluetooth service requested by the application; judging whether the application has the permission to use the type of Bluetooth service requested by the application; and performing corresponding preset operations according to the judgment result. At the same time, the invention also provides a Bluetooth usage permission identification device and a mobile terminal. Through the solution provided by the invention, it is possible to restrict the behavior of the application's original free use of Bluetooth services, improve the controllability of Bluetooth service permissions, reduce the threat that the application may pose to the security of user data by using certain Bluetooth service types, and thus improve the security of terminal use.

[0006] However, the above method has the following problems: using Bluetooth to confirm matching only by clicking, for each device that accepts the match and initiates the match, the authentication method is single and security is difficult to ensure. Summary of the Invention

[0007] To this end, the present invention provides a rights management system for electric vehicle Bluetooth terminals to overcome the problem that the existing technology uses Bluetooth to confirm matching only by clicking. For each device that accepts and initiates matching, the authentication method is single. At the same time, Bluetooth devices can only passively accept matching, which leads to a decrease in security.

[0008] To achieve the above objectives, the present invention provides a rights management system for electric vehicle Bluetooth terminals, comprising:

[0009] A central platform for distributing basic keys, and several matrix platforms for distributing matrix keys, basic keys, and device keys;

[0010] a plurality of key memories storing keys and Bluetooth actuators, and,

[0011] Several control terminals corresponding to each Bluetooth actuator;

[0012] The key storage or the Bluetooth actuator encapsulates at least one key, and for a single Bluetooth actuator, it corresponds to a single key storage;

[0013] The key storage and the corresponding Bluetooth actuator are encapsulated with the corresponding basic key, the corresponding matrix key and the single device key;

[0014] For a single communication initiated by the control terminal, the key storage device matches the control terminal;

[0015] In response to the key in the key storage completing the matching, the key storage is authenticated by the control terminal;

[0016] The Bluetooth actuator initiates authentication of the control terminal according to the device key in response to the key storage being authenticated;

[0017] In response to the key in the Bluetooth actuator completing the matching, the Bluetooth actuator broadcasts that the Bluetooth actuator is authenticated;

[0018] In response to the Bluetooth actuator being authenticated, the control terminal pairs with the Bluetooth actuator.

[0019] Furthermore, for any matrix platform, it is independently arranged from the central platform;

[0020] The central platform responds to the establishment of the matrix platform and generates a number of basic keys corresponding to the matrix platform;

[0021] The matrix platform generates a number of matrix keys when it is established;

[0022] For a single matrix platform, the number of corresponding matrix keys shall not exceed the number of corresponding basic keys.

[0023] Furthermore, for a single Bluetooth actuator and the corresponding key storage, the key storage is set to read-only, and,

[0024] During packaging, the central platform and the corresponding matrix platform store the basic key and the matrix key corresponding to the Bluetooth actuator into the corresponding Bluetooth actuator and / or the key memory.

[0025] Furthermore, the central platform responds to the establishment of the matrix platform and sets a Bluetooth actuator order corresponding to the matrix platform;

[0026] The quantity of the Bluetooth actuator order shall not exceed the quantity of basic keys corresponding to the matrix platform.

[0027] Furthermore, the encapsulation and encapsulation method of the basic key, the matrix key, and the device key are set in a group with the Bluetooth actuator and the key storage.

[0028] Furthermore, for a single Bluetooth actuator and a corresponding key storage, the corresponding packaging method includes at least:

[0029] The Bluetooth actuator encapsulates the device key and the base key or matrix key, and the key memory encapsulates the matrix key or the base key.

[0030] Alternatively, the Bluetooth actuator encapsulates the device key, and the key memory encapsulates the matrix key and the base key,

[0031] Alternatively, the Bluetooth executor encapsulates the device key, and the key memory encapsulates the base key and the matrix key,

[0032] Alternatively, the positions of the key storage and the Bluetooth actuator are swapped.

[0033] Furthermore, when the matrix platform is established, a corresponding platform key is also set;

[0034] When the control terminal and the Bluetooth actuator are communicating, if the platform keys of the control terminal and the Bluetooth actuator are the same, the control terminal responds to the communication request of the Bluetooth actuator and connects, or the Bluetooth actuator responds to the communication request of the control terminal and connects;

[0035] When the control terminal initiates communication with the Bluetooth actuator, the Bluetooth actuator verifies the key of the control terminal in sequence according to the key encapsulation method, and performs key matching on the key of the control terminal;

[0036] For a control terminal and a Bluetooth actuator carrying the same platform key, the control terminal or the Bluetooth actuator encrypts and / or decrypts the matrix key, the base key and the device key according to the platform key to determine whether the control terminal or the Bluetooth actuator corresponds.

[0037] Furthermore, the Bluetooth actuator completes the key matching in response to the key storage and initiates a corresponding key matching to the control terminal. Meanwhile, the corresponding control terminal decrypts the key matching information according to the platform key.

[0038] If the Bluetooth actuator fails to complete key matching, the Bluetooth actuator disconnects from the control terminal;

[0039] If the key information returned by the Bluetooth executor is not decrypted according to the platform key, the control terminal disconnects from the Bluetooth executor.

[0040] Furthermore, the key memory responds to the Bluetooth actuator to complete the key matching and initiates a corresponding key matching to the control terminal. At the same time, the corresponding Bluetooth actuator decrypts the key matching information according to the platform key.

[0041] If the key memory fails to complete the key matching, the key memory sends a disconnection instruction, and the control terminal receives the instruction and disconnects from the Bluetooth actuator;

[0042] If the key information returned by the control terminal is not decrypted according to the platform key, the Bluetooth actuator disconnects from the control terminal.

[0043] Furthermore, the control terminal is connected to the matrix platform, and when the actuator is packaged, the matrix platform obtains a number of decryption information related to the basic key, the matrix key and the device key;

[0044] The matrix platform responds to the request of the control terminal carrying the platform key and sends a number of decryption information and encapsulation methods corresponding to the actuator to the corresponding control terminal;

[0045] When the control terminal initiates a connection with the actuator and performs matching, it sends a plurality of decryption information in the order corresponding to the encapsulation mode.

[0046] Compared with the existing technology, the beneficial effect of the present invention is that it distributes different categories of keys by setting up a central platform and several matrix platforms, and combines the keys with hardware to perform Bluetooth matching by mutual authentication between the device and the control terminal, which effectively improves the security of the device while effectively improving the security of the Bluetooth device.

[0047] Furthermore, by setting up several matrix platforms, the resources of the central platform are integrated on the sub-platforms respectively. While effectively distinguishing the platforms, the autonomy of each matrix platform is enhanced, thereby effectively avoiding mutual interference between the matrix platforms or the matrix platform and the central platform, thereby effectively improving the security of the Bluetooth devices belonging to each matrix platform.

[0048] Furthermore, by setting up the Bluetooth actuator and key storage together, various types of keys can be stored separately, and several different authentication paths can be formed by utilizing different key sequences, thereby improving the anti-interference ability of the key when in use. At the same time, it avoids the problem of key loss caused by dismantling the hardware level to obtain the key, further improving the security of the Bluetooth device.

[0049] Furthermore, by limiting the number of Bluetooth actuators and basic keys, the number of Bluetooth actuators can be controlled and can all be recorded on the matrix platform or central platform, effectively avoiding the problem of interference between Bluetooth actuators on different matrix platforms, thereby further improving the security of Bluetooth devices.

[0050] Furthermore, by grouping and encapsulating the basic key, matrix key and device key, a fixed triplet is formed. At the same time, the setting of the triplet is used to associate the Bluetooth actuator, control terminal and the corresponding matrix platform to form a core identifier, thereby effectively improving the security of the Bluetooth devices belonging to each matrix platform.

[0051] Furthermore, by setting a platform key, the communication between the control terminal and the Bluetooth actuator is mutually identified, and the platform key is used to form corresponding decryption information. The control terminal and the Bluetooth actuator recognize each other and send information to complete the decryption, and respectively execute corresponding actions if the decryption information is correct or incorrect. While effectively ensuring the correspondence between the control terminal and the Bluetooth actuator and the matrix platform, it effectively improves the security of the Bluetooth devices belonging to each matrix platform.

[0052] Furthermore, the matrix platform is used to distribute the keys to ensure that the matrix platform is aware of the control terminals, thereby effectively improving the security of the control terminals. At the same time, the decryption information and packaging methods can be sent to the corresponding control terminals in a variety of ways. While effectively improving the security of the matrix platform, a variety of transmission methods are used, and by encrypting each transmission method, the security of the Bluetooth device is effectively improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] Figure 1 This is a schematic diagram of the structure of the rights management system of the electric vehicle Bluetooth terminal of the present invention;

[0054] Figure 2 A schematic diagram of key issuance for a rights management system according to an embodiment of the present invention;

[0055] Figure 3 Schematic diagram of the system structure of the application platform of the present invention;

[0056] Figure 4 This is a flowchart of pairing a control terminal with a Bluetooth device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0057] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are merely used to explain the present invention and are not intended to limit the present invention.

[0058] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0059] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside", and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. This is only for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0060] Furthermore, it should be noted that, in the description of the present invention, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integral connections; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on specific circumstances.

[0061] See also Figure 1 As shown in FIG, it is a schematic diagram of the structure of the rights management system of the electric vehicle Bluetooth terminal of the present invention, including:

[0062] A central platform for distributing basic keys, and several matrix platforms for distributing matrix keys, basic keys, and device keys;

[0063] a plurality of key memories storing keys and Bluetooth actuators, and,

[0064] Several control terminals corresponding to each Bluetooth actuator;

[0065] The key storage or Bluetooth actuator encapsulates at least one key, and for a single Bluetooth actuator, it corresponds to a single key storage;

[0066] The key memory and the corresponding Bluetooth actuator are encapsulated with the corresponding basic key, the corresponding matrix key and the single device key;

[0067] By setting up a central platform and several matrix platforms, different categories of keys are distributed, and the keys are combined with hardware. Bluetooth matching is performed by mutual authentication between devices and control terminals, which effectively improves the security of Bluetooth devices while effectively improving the security of devices.

[0068] To better understand this solution, the following further explains the above content:

[0069] Example 1:

[0070] Key hierarchy

[0071] Central platform: distributes root keys (basic keys) to verify the legitimacy of the matrix platform.

[0072] Matrix platform: distributes derived keys (matrix keys, device keys) and manages specific device groups.

[0073] Key storage: stores basic keys, matrix keys, and device keys, and serves as an authentication intermediary.

[0074] Bluetooth Actuator: Built-in device key to directly control vehicle functions (such as unlocking / starting).

[0075] Control terminal: User device (APP / Mini Program), initiates authentication request.

[0076] Certification Process

[0077] Step 1: Control terminal initiates communication

[0078] The user sends a request to the key storage through the APP (carrying the sub-platform ID and application ID).

[0079] Step 2: Key Memory Matching

[0080] Verify the identity of the control terminal (matching the basic key + matrix key), and trigger the Bluetooth actuator after passing.

[0081] Step 3: Bluetooth Actuator Secondary Authentication

[0082] The actuator uses the device key to pair directly with the control terminal to complete two-way authentication.

[0083] Step 4: Pairing successful

[0084] The Bluetooth actuator broadcasts the authentication result, and the control terminal obtains vehicle control authority.

[0085] Safety Design

[0086] Hierarchical keys: Basic key (platform level), matrix key (group level), and device key (uniqueness) form three levels of protection.

[0087] Dynamic authentication: A single communication requires two-level key matching to prevent replay attacks.

[0088] Physical isolation: The key storage is separated from the Bluetooth actuator. If part of the key is leaked, the device cannot be directly controlled.

[0089] Example 2:

[0090] GPS anti-theft system

[0091] System composition:

[0092] Main platform: unified management of all GPS sub-platforms and allocation of sub-platform ID / KEY.

[0093] GPS sub-platform:

[0094] Unique ID: such as GPS_Sub_001, bound to a specific vehicle model.

[0095] Security KEY: Encrypts GPS data communication (such as location reporting / remote vehicle locking).

[0096] Terminal application: dedicated anti-theft APP (sub-platform application ID APP_GPS_002).

[0097] Device side:

[0098] Vehicle-mounted GPS module: built-in sub-platform KEY and device key, reporting location in real time.

[0099] Cloud anti-theft service: Verify the legitimacy of commands (such as car lock commands) through the sub-platform KEY.

[0100] Workflow:

[0101] Abnormal alarm: GPS detects abnormal vehicle movement and reports it to the sub-platform after signing with the device key.

[0102] Command verification: The user sends a lock request through the APP, and the sub-platform verifies the application ID+KEY before issuing the command.

[0103] Secure execution: The GPS module verifies the command signature, executes the vehicle lock, and feeds back the result to the main platform log.

[0104] See also Figure 2 As shown, it is a schematic diagram of key issuance of the rights management system according to an embodiment of the present invention. For any matrix platform, it is independently set up with the central platform;

[0105] The central platform responds to the establishment of the matrix platform and generates several basic keys corresponding to the matrix platform;

[0106] The matrix platform generates several matrix keys when it is established;

[0107] For a single matrix platform, the number of corresponding matrix keys shall not exceed the number of corresponding basic keys.

[0108] Example 3:

[0109] Central platform: Generates 300 basic keys (such as BK-001, BK-002, ..., BK-300).

[0110] Matrix Platform A:

[0111] 260 base keys (BK-001, BK-002, ..., BK-260) are distributed.

[0112] Generate two matrix keys (MK-A1 and MK-A2), the number of which is ≤ the number of basic keys (2 ≤ 260).

[0113] Example 4:

[0114] Central platform: Generates 300 basic keys (such as BK-001, BK-002, ..., BK-300).

[0115] Matrix Platform B:

[0116] 300 base keys (BK-001, BK-002, ..., BK-300) are distributed.

[0117] Generate one matrix key (MK-B1), the number of which is ≤ the number of basic keys (1 ≤ 300).

[0118] Example 5:

[0119] Central platform: Generates 300 basic keys (such as BK-001, BK-002, ..., BK-300).

[0120] Matrix Platform C:

[0121] 150 base keys (BK-001, BK-002, ..., BK-150) are distributed.

[0122] Generate 150 matrix keys (MK-C1, MK-C2, ..., MK-C150), where the number is ≤ the number of basic keys (150 ≤ 150).

[0123] In the above distribution method, the two matrix keys corresponding to matrix platform A can ensure that the keys of each matrix platform are independent, and the leakage of a single matrix key will not affect other platforms.

[0124] By setting up several matrix platforms, the resources of the central platform are integrated on the sub-platforms respectively. While effectively distinguishing each platform, the autonomy of each matrix platform is enhanced, thereby effectively avoiding mutual interference between each matrix platform or between the matrix platform and the central platform, thereby effectively improving the security of the Bluetooth devices belonging to each matrix platform.

[0125] Specifically, for a single Bluetooth actuator and the corresponding key storage, its key storage is set to read-only, and,

[0126] During packaging, the central platform and the corresponding matrix platform store the basic key and the matrix key corresponding to the Bluetooth actuator into the corresponding Bluetooth actuator and / or the key memory.

[0127] By setting up the Bluetooth actuator and key storage together, various types of keys can be stored separately, and several different authentication paths can be formed by using different key sequences, thereby improving the anti-interference ability of the key when in use. At the same time, it avoids the problem of key loss caused by dismantling the hardware at the hardware level to obtain the key, further improving the security of the Bluetooth device.

[0128] Example 6:

[0129] Shared bicycle Bluetooth lock (key separation)

[0130] Central platform: Generates the basic key BK-10 and assigns it to the matrix platform "City Operation Group".

[0131] Matrix Platform:

[0132] Derive the matrix key MK-City-01 and the device key DK-Lock-001.

[0133] Write BK-10 and MK-City-01 to the key memory (read only).

[0134] Write DK-Lock-001 to the Bluetooth actuator (read only).

[0135] Certification process:

[0136] User APP (carrying BK-10) requests to connect to the key storage.

[0137] After the key store verifies BK-10, it returns the signature of MK-City-01.

[0138] The Bluetooth actuator is paired with DK-Lock-001.

[0139] Example 7:

[0140] Personal electric vehicle key (integrated design)

[0141] Central platform: Generates the basic key BK-20 and assigns it to the matrix platform "personal user group".

[0142] Matrix Platform:

[0143] Derive the matrix key MK-User-01 and the device key DK-Bike-123.

[0144] Write BK-20, MK-User-01, and DK-Bike-123 to the Bluetooth actuator (read only).

[0145] Certification process:

[0146] The user app communicates directly with the Bluetooth actuator and verifies BK-20 → MK-User-01 → DK-Bike-123 in sequence.

[0147] Example 8:

[0148] Industrial Park Patrol Car (Mixed Storage)

[0149] Central platform: Generates the basic key BK-30 and assigns it to the "Park Management Group" on the matrix platform.

[0150] Matrix Platform:

[0151] Derive the matrix key MK-Park-01 and the device key DK-Car-005.

[0152] Store BK-30 in the key memory, and MK-Park-01 and DK-Car-005 in the Bluetooth actuator.

[0153] Certification process:

[0154] The management terminal authenticates BK-30 through the key memory.

[0155] The Bluetooth actuator independently completes the calibration of MK-Park-01 and DK-Car-005.

[0156] Protection against physical attacks

[0157] Read-only storage requires a security chip (such as SE or TPM) to resist side-channel attacks or physical detection.

[0158] Key Isolation

[0159] The basic key and the matrix key are stored separately (as in Example 1) to avoid global risks caused by single point leakage.

[0160] Least privilege

[0161] The Bluetooth actuator only holds necessary keys (such as MK+DK in Example 3) to reduce exposure.

[0162] Specifically, for a single Bluetooth actuator and corresponding key storage, the corresponding packaging method includes at least:

[0163] The Bluetooth actuator encapsulates the device key and the base key or matrix key, and the key memory encapsulates the matrix key or base key.

[0164] Alternatively, the Bluetooth executor encapsulates the device key, and the key storage encapsulates the matrix key and the base key,

[0165] Alternatively, the Bluetooth executor encapsulates the device key, and the key storage encapsulates the base key and matrix key,

[0166] Alternatively, the positions of the key memory and the Bluetooth actuator are swapped.

[0167] By grouping and encapsulating the basic key, matrix key and device key, a fixed triplet is formed. At the same time, the triplet setting is used to associate the Bluetooth actuator, control terminal and the corresponding matrix platform to form a core identifier, thereby effectively improving the security of the Bluetooth devices belonging to each matrix platform.

[0168] Specifically, for a single communication initiated by a control terminal, the key storage matches the control terminal;

[0169] In response to the key in the key storage completing the matching, the key storage passes the authentication of the control terminal;

[0170] The Bluetooth actuator responds that the key storage has passed the authentication and initiates authentication of the control terminal based on the device key;

[0171] In response to the key matching in the Bluetooth actuator, the Bluetooth actuator broadcasts that the Bluetooth actuator has passed the authentication;

[0172] The control terminal responds to the Bluetooth actuator that the authentication is passed and pairs with the Bluetooth actuator.

[0173] Specifically, when the matrix platform is established, the corresponding platform key is also set;

[0174] When the control terminal and the Bluetooth actuator are communicating, if the platform keys of the control terminal and the Bluetooth actuator are the same, the control terminal responds to the communication request of the Bluetooth actuator and connects, or the Bluetooth actuator responds to the communication request of the control terminal and connects;

[0175] When the control terminal initiates communication with the Bluetooth actuator, the Bluetooth actuator verifies the key of the control terminal in turn according to the key encapsulation method and performs key matching on the key of the control terminal;

[0176] For a control terminal and a Bluetooth actuator carrying the same platform key, the control terminal or the Bluetooth actuator encrypts and / or decrypts the matrix key, the base key and the device key according to the platform key to determine whether the control terminal or the Bluetooth actuator corresponds.

[0177] Specifically, the central platform responds to the establishment of the matrix platform and sets the Bluetooth actuator orders corresponding to the matrix platform;

[0178] The matrix platform determines the corresponding model and basic key of each Bluetooth actuator based on the Bluetooth actuator order;

[0179] The number of Bluetooth actuator orders shall not exceed the number of basic keys corresponding to the matrix platform;

[0180] Among them, the model of the Bluetooth actuator can also be used as the basic key;

[0181] The number of basic keys is the number that the matrix platform applies to the central platform, and this number can be set arbitrarily.

[0182] By limiting the number of Bluetooth actuators and basic keys, the number of Bluetooth actuators can be controlled and can all be recorded on the matrix platform or central platform. This effectively avoids interference between Bluetooth actuators on different matrix platforms, thereby further improving the security of Bluetooth devices.

[0183] Specifically, the encapsulation and encapsulation method of the basic key, matrix key, and device key are set in groups with the Bluetooth actuator and key storage.

[0184] To accurately identify each electric two-wheeler and its accessories, the system uses a triplet mechanism consisting of manufacturer ID, model ID, and device ID. This triplet is the core identifier of the device's uniqueness and is used throughout the device registration, authentication, and binding processes.

[0185] Specifically, the Bluetooth actuator responds to the key memory to complete the key matching and initiates the corresponding key matching to the control terminal. At the same time, the corresponding control terminal decrypts the key matching information according to the platform key.

[0186] If the Bluetooth actuator fails to complete key matching, the Bluetooth actuator will be disconnected from the control terminal;

[0187] If the key information returned by the Bluetooth actuator is not decrypted according to the platform key, the control terminal disconnects from the Bluetooth actuator.

[0188] Specifically, the key memory responds to the Bluetooth actuator to complete the key matching and initiates the corresponding key matching to the control terminal. At the same time, the corresponding Bluetooth actuator decrypts the key matching information according to the platform key.

[0189] If the key storage fails to complete the key matching, the key storage sends a disconnection instruction, and the control terminal receives the instruction and disconnects from the Bluetooth actuator;

[0190] If the key information returned by the control terminal is not decrypted according to the platform key, the Bluetooth actuator disconnects from the control terminal.

[0191] By setting the platform key, the communication between the control terminal and the Bluetooth actuator is mutually identified, and the platform key is used to form the corresponding decryption information. The control terminal and the Bluetooth actuator recognize each other and send the information that completes the decryption, and respectively execute the corresponding actions if the decryption information is correct or incorrect. While effectively ensuring the correspondence between the control terminal and the Bluetooth actuator and the matrix platform, it effectively improves the security of the Bluetooth devices belonging to each matrix platform.

[0192] Specifically, the control terminal is connected to the matrix platform, and when the actuator is encapsulated, the matrix platform obtains several decryption information related to the basic key, the matrix key and the device key;

[0193] The matrix platform responds to the request of the control terminal carrying the platform key and sends a number of decryption information and encapsulation methods corresponding to the actuator to the corresponding control terminal;

[0194] When the control terminal initiates a connection and matches the actuator, it sends several decryption messages in the order corresponding to the encapsulation method.

[0195] See also Figure 3 As shown, it is a schematic diagram of the system structure of the application platform of the present invention. In the application scenario of electric two-wheeled vehicles, it is very important to build an efficient and safe equipment management system.

[0196] The following are specific solutions for the management system:

[0197] 1. Platform Architecture Overview

[0198] We have designed a layered master platform architecture consisting of a core master platform and multiple sub-platforms. As the system's hub, the master platform is responsible for registering, managing, and coordinating the sub-platforms, providing unified management and configuration services. Sub-platforms can be registered within the master platform as needed, and each sub-platform can operate independently, focusing on specific functions or device product types.

[0199] Key elements of the sub-platform:

[0200] Each sub-platform has its own unique ID (sub-platform ID) to identify it.

[0201] Each sub-platform has its own unique security key (sub-platform KEY), which is used for secure communication and identity authentication between devices and terminals under each platform.

[0202] The platform supports various forms of terminal applications (sub-platform application IDs), such as mobile apps or WeChat mini-programs, to facilitate users to operate and manage electric two-wheeler related functions.

[0203] 2. Account Registration and Device Management on the Platform

[0204] 1. Account registration

[0205] When entering the terminal application for the first time, you need to register your user account information, which is managed and maintained by the sub-platform.

[0206] 2. Equipment Management

[0207] In the sub-platform, the number of registered electric two-wheelers needs to be managed to avoid excessive resource consumption or misuse. By setting a vehicle limit and dynamically adjusting the strategy, system stability and efficiency are ensured.

[0208] 3. Device triplet information

[0209] To accurately identify each electric two-wheeler and its accessories, the system uses a triplet mechanism consisting of manufacturer ID, model ID, and device ID. This triplet is the core identifier of the device's uniqueness and is used throughout the device registration, authentication, and binding process.

[0210] 3. Connection Method and Security Mechanism

[0211] See also Figure 4 As shown, it is a flowchart of pairing the control terminal and the Bluetooth device according to an embodiment of the present invention:

[0212] 1. Connection method

[0213] After entering the application, the control terminal connects to the sub-platform through the network and retrieves the relevant device information under the account. Based on the information obtained from the sub-platform, it connects to the relevant device via Bluetooth and performs authentication and communication.

[0214] 2. Security Mechanism

[0215] To ensure system security, a two-way authentication mechanism is adopted. By combining the electric two-wheeled vehicle device ID, mobile phone ID, sub-platform key and AES encryption algorithm, the authenticity of the communicating parties and the security of data transmission are guaranteed.

[0216] 4. Equipment Control Methods and Legal Verification

[0217] 1. Terminal Application

[0218] It supports various forms of terminal applications. Users can access and control various functions of the electric two-wheeled vehicle by downloading the APP or using the WeChat mini-program, such as starting and shutting down the vehicle, checking the remaining power, and locating the vehicle.

[0219] 2. Legal Verification

[0220] The control terminal uses a sub-platform-specific security key to legally control the device. This security key is used not only for encrypted communication but also for identity authentication.

[0221] 5. Device Binding Method

[0222] Device binding is one of the core functions of the system, and provides two main binding methods:

[0223] 1. Scan the QR code to bind

[0224] Users can complete the binding process by scanning the electric two-wheeler's QR code. The QR code contains the app link, which takes them directly to the corresponding app download page or mini-program portal. The QR code also contains device triplet information, which the system analyzes to automatically identify and register the electric two-wheeler.

[0225] 2. Bluetooth broadcast monitoring binding

[0226] In the absence of a QR code, users can complete the binding by monitoring the Bluetooth broadcast of the electric two-wheeled vehicle.

[0227] The electric two-wheeled vehicle will periodically broadcast its triplet information. After receiving the broadcast, the system will automatically extract the triplet information and complete the device binding.

[0228] Through the above solutions, a complete and efficient electric two-wheeled vehicle equipment management system can be built, covering the specific implementation steps from platform architecture design to device binding, aiming to provide users with a convenient and safe electric two-wheeled vehicle management experience.

[0229] Thus far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art may make equivalent changes or substitutions to the relevant technical features, and the technical solutions after such changes or substitutions will fall within the scope of protection of the present invention.

[0230] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that the present invention is susceptible to various modifications and variations. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

Claims

1. A rights management system for electric vehicle Bluetooth terminals, comprising: A central platform for distributing basic keys, and several matrix platforms for distributing matrix keys, basic keys, and device keys; a plurality of key memories storing keys and Bluetooth actuators, and, Several control terminals corresponding to each Bluetooth actuator; The key storage or the Bluetooth actuator encapsulates at least one key, and for a single Bluetooth actuator, it corresponds to a single key storage; The key storage and the corresponding Bluetooth actuator are encapsulated with the corresponding basic key, the corresponding matrix key and the single device key; It is characterized in that For a single communication initiated by the control terminal, the key storage device matches the control terminal; In response to the key in the key storage completing the matching, the key storage is authenticated by the control terminal; The Bluetooth actuator initiates authentication of the control terminal according to the device key in response to the key storage being authenticated; In response to the key in the Bluetooth actuator completing the matching, the Bluetooth actuator broadcasts that the Bluetooth actuator is authenticated; In response to the Bluetooth actuator being authenticated, the control terminal pairs with the Bluetooth actuator.

2. The electric vehicle Bluetooth terminal authority management system according to claim 1, characterized in that: For any matrix platform, it is set up independently from the central platform; The central platform responds to the establishment of the matrix platform and generates a number of basic keys corresponding to the matrix platform; The matrix platform generates a number of matrix keys when it is established; For a single matrix platform, the number of corresponding matrix keys shall not exceed the number of corresponding basic keys.

3. The electric vehicle Bluetooth terminal authority management system according to claim 2, characterized in that: For a single Bluetooth actuator and its corresponding key storage, its key storage is set to read-only, and, During packaging, the central platform and the corresponding matrix platform store the basic key and the matrix key corresponding to the Bluetooth actuator into the corresponding Bluetooth actuator and / or the key memory.

4. The electric vehicle Bluetooth terminal authority management system according to claim 1, characterized in that: The central platform responds to the establishment of the matrix platform and sets a Bluetooth actuator order corresponding to the matrix platform; The quantity of the Bluetooth actuator order shall not exceed the quantity of basic keys corresponding to the matrix platform.

5. The electric vehicle Bluetooth terminal authority management system according to claim 3 or 4, characterized in that: The encapsulation and encapsulation method of the basic key, the matrix key, and the device key are set in a group with the Bluetooth actuator and the key storage.

6. The electric vehicle Bluetooth terminal authority management system according to claim 5, characterized in that: For a single Bluetooth actuator and corresponding key storage, the corresponding packaging method includes at least: The Bluetooth actuator encapsulates the device key and the base key or matrix key, and the key memory encapsulates the matrix key or the base key. Alternatively, the Bluetooth actuator encapsulates the device key, and the key memory successively encapsulates the matrix key and the basic key. Alternatively, the Bluetooth actuator encapsulates the device key, and the key memory successively encapsulates the basic key and the matrix key. Alternatively, the positions of the key storage and the Bluetooth actuator are swapped.

7. The electric vehicle Bluetooth terminal authority management system according to claim 6, characterized in that: When the matrix platform is established, a corresponding platform key is also set; When the control terminal and the Bluetooth actuator are communicating, if the platform keys of the control terminal and the Bluetooth actuator are the same, the control terminal responds to the communication request of the Bluetooth actuator and connects, or the Bluetooth actuator responds to the communication request of the control terminal and connects; When the control terminal initiates communication with the Bluetooth actuator, the Bluetooth actuator verifies the key of the control terminal in turn according to the key encapsulation method, and performs key matching on the key of the control terminal; For a control terminal and a Bluetooth actuator carrying the same platform key, the control terminal or the Bluetooth actuator encrypts and / or decrypts the matrix key, the base key and the device key according to the platform key to determine whether the control terminal or the Bluetooth actuator corresponds.

8. The electric vehicle Bluetooth terminal authority management system according to claim 7, characterized in that: The Bluetooth actuator completes the key matching in response to the key storage and initiates a corresponding key matching to the control terminal. At the same time, the corresponding control terminal decrypts the key matching information according to the platform key. If the Bluetooth actuator fails to complete key matching, the Bluetooth actuator disconnects from the control terminal; If the key information returned by the Bluetooth executor is not decrypted according to the platform key, the control terminal disconnects from the Bluetooth executor.

9. The electric vehicle Bluetooth terminal authority management system according to claim 7, characterized in that: The key memory responds to the Bluetooth actuator to complete the key matching and initiates a corresponding key matching to the control terminal. At the same time, the corresponding Bluetooth actuator decrypts the key matching information according to the platform key. If the key memory fails to complete the key matching, the key memory sends a disconnection instruction, and the control terminal receives the instruction and disconnects from the Bluetooth actuator; If the key information returned by the control terminal is not decrypted according to the platform key, the Bluetooth actuator disconnects from the control terminal.

10. The electric vehicle Bluetooth terminal authority management system according to claim 8 or 9, characterized in that: The control terminal is connected to the matrix platform, and when the actuator is packaged, the matrix platform obtains a number of decryption information related to the basic key, the matrix key and the device key; The matrix platform responds to the request of the control terminal carrying the platform key and sends a number of decryption information and encapsulation methods corresponding to the actuator to the corresponding control terminal; When the control terminal initiates a connection with the actuator and performs matching, it sends a plurality of decryption information in the order corresponding to the encapsulation mode.

Images